CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile.

Score

CVSS 3.1 5.4 Medium

Status

Modified - psirt@fortinet.com

Published

2020-06-22

Last modified

2024-10-25

Weaknesses

CWE-79

Affected products

• Fortinet Fortiwlc (Fortinet)
• Fortiwlc (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-20-016